(19) 




(12) 



Europdisches Patentamt 
European Patent Office 
Office europeen des brevets (11) EP 0 848 123 A2 

EUROPEAN PATENT APPLICATION 



(43) Date of publication: 

17.06.19d8 Bulletin 1d98/25 

(21 ) Application number: 971 1 7590.6 

(22) Date of filing: 10.10.1997 



(51) Int. CL^ E05B 49/00 



(84) Designateb Contracting States: 


(72) Inventors: 


AT BE CH DE DK R FR GB GR IE IT LI LU MC 


• Meier, Herbert 


NL PT SE 


85368 Moosburg (DE) 




• Knebelkamp, Michael 


(30) Priority: 10.10.1996 US 728844 


85356 Freising (DE) 


(71) Applicant: 


(74) Representative: 


TEXAS INSTRUMENTS DEUTSCHLAND GMBH 


Schwepfinger, Karl-Heinz, Dipl.-lng. 


85356 Freising (DE) 


Prinz & Partner, 




Manzingerweg 7 




81241 Munchen (DE) 



(54) A remote keyless entry system 

(57) A road vehicle keyless entry system (10) hav- 
ing an in-vehicle communication processor (11) and a 
remote transponder (15) is provided. The communica- 
tion processor (10) has a radio frequency received (12), 
a tow frequency transmitter/receiver (13) and a control- 
ler (14) capable of encrypting and reading the signals 
sent and received by the low frequency transmit- 



ter/receiver (13). The transponder (15) has a radio fre- 
quency transmitter (16) that transmits a signal to the 
communication processor (11) upon receipt of a manual 
stimulus and a low frequency transmitter/receiver (17) 
capable of reading and responding to encrypted signals 
received from the communication processor (11). 
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Description 

FIELD OF THE INVENTION 

This invention relates to the field of compact, radio 
frequency (RF) transponders of the type known to be 
useful in systenns for security and information storage, 
access control, entry validation and identification, and in 
other comparable systems. 

Remote keyless entry systems require an interro- 
gator circuit built into a road vehicle or building, for 
example, and a renote transponder which incorporates 
transmitting and receiving circuits in a compact case 
that may be carried by a person in a key, a key fob, a 
badge, a tag or in any similar Ininiaturized housing. 
More particularly this invention relates to a transponder 
in a road vehicle or autonriotive remote keyless entry 
and immobalization system which is functional over an 
increased range in active arxi passive modes of opera- 
tion. This invention further relates to a transponder 
which utilizes a secure challenge-response encryption 
technique to provide greater security for the user 

Compact passive low frequency transponders, 
using a frequency of 134.2 kilohertz (134.2 kHz), for 
example, for passive fentry and immobilizer functions 
and radio frequency remote control transmitters, using a 
frequency of 433 megahertz (433 MHz), for example, for 
use in remote keyless entry and security systems for 
automobiles are generally known. These systems allow 
access to the automobile without the use of battery 
power, if the transponder is used in close proximity to 
the interrogator, and allow the operator to transmit com- 
mands such as locking arx! unlocking doors, hood and 
trunk, controlling vehicle lighting and ignition, and arm- 
ing and disarming the anti -theft security system to the 
vehicle over greater distances. The transponders used 
may employ an interrogator- respond er arrangement 
with an EEPROM data storage device and a small 
capacitor that serves as an energy accumulator, 
charged by the energy provided by the radio frequency 
interrogation, to provide power for the transponder. The 
transponder is, thus, sufficiently smalt to supplement or 
replace a conventional vehicle door and ignition key 
Such a transponder is disclosed by Schuermann at at. 
In U.S. Patent 5,053.774. ^ 

Howes/lsr, the transponder systems in current use 
generally have a limited operating range. Current 
remote control transponder systems require battery 
power for proper operation ar)d are not functional, in a 
passive mode, that is. when operated without a battery. 

SUMMARY OF THE INVENTION 

The present invention provides a road vehicle 
remote keyless entry system which is functional over an 
irKjreased range in the active and passive modes of 
operation while increasing security by the use of a 
secure challenge-response encryption technique. A 
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road vehicle keyless entry system having an in-vehicle 
comnnunication processor and a remote, miniaturized 
transponder is provided. The communication processor 
has a radio frequency receiver, a tow frequency trans- 

5 mitter/receiver and a controller capable of sending and 
receiving signals via the low frequency transmit- 
ter/receiver and receiving signals via the radio fre- 
quency receiver. The transponder has a radio frequency 
transmitter that transmits a signal to the communication 

10 processor upon receipt of a manual stimulus and a low 
frequency transmitter/receiver capable of reading the 
signals received from the communication processor and 
preparing an encrypted response for transmission to the 
communication processor. When the transponder pro- 

75 vides an encrypted response containing the correct 
vehicle code to the comrrujnication processor, the com- 
munication processor authorizes the desired operation 
such as. for example, locking or unlocking the car. arm- 
ing or disarming the artti-theft alarm system or the per- 

20 formance of vehicle related initialization functions such 
as seat, seat belt and vehicle mirror adjustments and 
lighting the vehicle interior lights. 

The present invention further provides a secure 
road vehicle keyless entry system comprising an in- 

25 vehicle communication processor and a remote trans- 
ponder. The communication processor and transponder 
communicate in parallel paths, a first path being a radio 
frequency transmission from the transponder to the 
communication processor and a second iDath being a 

30 low frequency, encrypted two way transmission 
between the transpxjnder and the communication proc- 
essor. The radio frequency transmission and the low 
frequency, encrypted transmission can be compared by 
the communication processor for authentication of the 

35 transmitted data or command before the communication 
processor authorizes the desired operation and. if one 
communication channel is affected by interference, the 
second communication channel may be used as a 
backup. 

40 It is further contenplated that the radio frequency 
receiver in the communication processor and the radio 
frequency transmitter in the transponder may be trans- 
mitter/receivers, each capable of performing both the 
receiving and transmitting functions. When radio fre- 

45 quency transmitter/receivers are used, both the radio 
frequency communication and the low frequency com- 
munication between the communication processor and 
the transponder will be two way transmissions used to 
transmit data between the two devices. 

50 

BRIEF DESCRIPTION OF DRAWINGS 

The present invention will now be further described 
by way of example, with reference to the accompanying 
55 drawings in which: 

FIG. 1 is a block schematic illustrating the functional 
elements and data paths of one embodiment of the 
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road vehicle keyless entry system of the present 
inverrtion. 

FIG. 2 is a block schematic illustrating the functional 
elements and data paths of the remote transponder 
of this embodiment of the invention. 
FIG. 3 is a block schematic illustrating the low fre- 
quency transmitter/receiver of the remote trans- 
ponder of this embodiment of the invention. 
FIG. 4 is a block schematic illustrating modifications 
to the remote transponder of the road vehicle key- 
less entry system of FIG. 1 . 
FIG. 5 is a block schematic illustrating modifications 
to the remote transponder of the road vehicle key- 
less entry s^j^stem of FIG. 4. 

FIG. 6 is a block sch^atic illustrating the functional 
elements and data paths of one embodiment of the 
write distance expander of the remove transponder 
of FIG. 5. 

FIG. 7 is a block schematic illustrating the functional 
~ elements and data paths of a second embodiment 
of the write distance expander of the remote trans- 
ponder of FIG. 5 and 

FIG. 8 is a block schematic illustrating a write dis- 
tance expander. 

DETAILED DESCRIPTION AND PREFERRED 
Efi^BODIMENT 

In the road vehicle keyless entry system of the 
present irrvention the immobilization function, which 
locks the vehicle and initiates operation of the alarm 
system/is separate from the remote keyless entry func- 
tion, which, for example, resets the alarm system and 
authorizes unlocking the vehicle and performance of 
vehicle related initialization functions such as seat, seat 
belt and vehicle mirror adjustments and lighting the 
vehicle interior lights. 

Turning to the drawings, FIG. 1 illustrates the func- 
tional elements and data paths of one embodiment of 
the road vehicle keyless entry system of the present 
invention. In this disclosure, the term road vehicle 
means all of the various types of vehicles that are oper- 
ated upon the highway system including, but not limited 
to, automobiles, trucks, vans, motorcycles, buses and 
motorhomes. H is intended Jhat the arrangement shown 
in^FIG. 1, and in the following figures, shall be inter- 
preted as an illustrative system configuration and that 
other possible configurations, more adapted to the spe- 
cific user needs, exist within the scope of the disclosure 
herein. Further, fhe use of like reference numbers to 
identify components within the various figures indicates 
the presence of similar elements within each of the dif- 
ferent figures. 

The road vehicle keyless entry system, generally 
designated as 1 0. includes a communication processor 
1 1 that is located within the vehicle and a remote, mini- 
aturized transponder 1 5. Communication processor 1 1 
may also be named an interrogator or called by other 
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names indicating its function as a unit which requests 
and receives information from the remote transponder 
15. Communication processor 11 has a radio frequency 
receiver 12. a low frequency transmitter/receiver 13 and 

5 a controller 14 which is capable of sending and receiv- 
ing signals via the low frequency trartsmitter/receiver 13 
arxJ receiving signals via the radio frequency receiver 
1 2. Controller 1 4 combined with low frequency transmit- 
ter/receiver 13 is preferat)Iy. a TIRIS reader, the term 

to TIRIS being an acronym known to those skilled in the 
art as denoting certain types of devices or equipment 
utilizing the transponder arrangement and TIRIS reader 
disclosed in Schuermann et al.. U.S. Patent 5.053,774. 
The transponder 15 has a radio frequency transmitter 

15 16 that transmits a signal to communication processor 
1 1 upon receipt of a stimulus manually produced by an 
operator's actuation of one of a plurality of push buttons 
18. While push buttons 18 are shown for convenience, 
any rr^nually operatable, pulse creating switch such as, 

20 for example, a toggle switch or a rotary switch may be 
used. Transponder 1 5 also has a low frequency trans- 
mitter/receiver 1 7 capable of reading signals received 
from communication processor 11. preparing an 
encrypted response and trarsmitting the encrypted 

25 response to communication processor 1 1 . 

In the present embodiment of the invention, com- 
munication processor 1 1 located within the vehicle and 
remote transponder 15 communicate with one another 
to permit a flow of information to initiate operations at 

30 the vehicle. Communication between the two devices is 
initiated by the vehicle operator who pushes a kxitton 18 
on transponder 15 which responds by transmitting a 
radio frequency (RF) signal to communication proces- 
sor 1 1 and a signal to low frequency transmitter/receiver 

35 1 7 to prepare it for interrogation by communication proc- 
essor 11. The signal transmission, using a rolling code 
for security, is a one way communication or data transfer 
from transponder 15 to communication processor 11 
using a radio frequency signal of 433 megahertz 

40 {433MHz). for example, or another suitable frequency. 
In response to the initial signal from transponder 15, 
communication processor 1 1 transmits a low frequency 
interrogation to transponder 15 requesting identification 
and verification of the original radio frequency signal. 

45 Thus, the low frequency communication between the 
devices, using a iow frequency signal such as, for exam- 
ple, 134.2 kilohertz (134.2 kHz), is a two way data 
exchange using the challenge-response principle for 
authentication or verification of identity. Security of the 

50 low frequency signal is maintained by using an encryp- 
tion key which is known only to communication proces- 
sor 1 1 in the vehicle and remote transponder 15. When 
transponder 15 provides an encrypted response con- 
taining the correct vehicle code to communication proc- 

55 essor 11 in response to the interrogation, 
communication processor 11 authorizes the desired 
operation within the vehicle. This use of encryption logic 
and interrogation and response via the low frequency 
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data transmission, in addition to the rolling code used 
for security with the radio frequency signal, greatly 
Increases the security of the road vehicle keytess entry 
system. 

In the description at>ove, a radio frequency trans- 
mitter and a receiver are used. It is further contemplated 
that radio frequency receiver 12 in communication proc- 
essor 11 and radio frequency transmitter 16 in trans- 
ponder 15 nnay be transmitter/receivers, each capable 
or performing both the receiving and transmitting func- 
tions. When radio frequency transmitter/receivers are 
used, both the radio frequency communication and the 
lew frequency communication between communication 
processor 1 1 and transponder 1 5 will be two way trans- 
missions used to transmit dat^ between the two 
devices. This use of two way radio frequency communi- 
cation is illustrated by the solid and dotted signal lines 
between radio frequency receiver 12 and radio fre- 
quency transmitter 1 6. 

FIG. 2 is a block schematic of the functional ele- 
ments and data paths of remote transponder 15 of this 
enr*)odiment of the invention showing radio frequency 
transmitter 16 arxi low frequency transmitter/receiver 
1 7. For remote security functions such as, for example, 
turning on the interior vfehicle lights or arming or disarm- 
ing the security system a functional range of greater 
than 10 meters is desired. For this purpose, trans- 
ponder 15 includes radio frequency transmitter 16 
which operates at a frequency of 433 megahertz 
(433MHz) using a rolling code for security. The present 
transponder 15 further includes fow frequency transmit- 
ter/receiver 1 7 which provides a two way exchange of 
data with the communication processor 1 1 in the vehicle 
using an encrypted signal having a frequency of 134.2 
kilohertz (134.2 kHz). Use of low frequency transmit- 
ter/receiver 17 allows access to, or enables, additional 
features such as, for example, programming, the 
exchange and verification of identification and the use 
of encryption logic and the transmission of various 
desired commands to the vehicle, all of which can sig- 
nificantly increase the security of the road vehicle 
remote keyless entry system. 

A vehicle operator provides a manual stimulus at 
the remote transponder 15 to initiate a command - the 
operator pushes one of the pluralit/HDf switches or push 
buttons 18^o indicate the action desired at the vehicle. 
Transponder 15 includes radio frequency transmitter 16 
which includes control logic module 29, radio frequency 
modulator/driver 28 and random number generator 30. 
In response to the operator's action, radio frequency 
transmitter 16 transmits a signal, the desired command, 
to radio frequency receiver 12 in communication proc- 
essor 1 1 at the vehicle and simultaneously transfers the 
command to low frequency transmitter/receiver 17 via 
the serial interface. For receipt of this command signal, 
power to passive, low frequency transmitter/receiver 17 
is provided by k>attery at terminal ACT on the control 
logic module 21 and data are received using clock and 



data irput ports, terminals SC and SI. In addtion to the 
control logic module 21, low frequency transmit- 
ter/receiver 17 includes encryption logic module 22, 
memory 23, radio frequency circuitry 24. shift register 

5 25, tuned antenna, a parallel resonant circuit, 26 and 
charge or power capacitor 27. Low frequency transmit- 
ter/receiver 17 transmits the remote commarxl to low 
frequency transmitter/receiver 1 3 which was switched to 
the receive nxxJe by controller 1 4 when radio frequency 

10 receiver 12 detected the carrier and command signal 
from radio frequency transmitter 1 6. Thus, even if exter- 
nal influences create interference with the radio fre- 
quency transmission of the desired command, the 
command may k^e received by communication proces- 

is sor 1 1 through the use of low frequency transmission 
signals although the transmission range for the low fre- 
quency signal is reduced. Authentication of the com- 
mand may be confirmed by control processor 11 
transmitting a challenge to the transponder 15 using low 

20 frequency transmitter/receiver 13. When the challenge 
is received by low frequency transmitter/receiver 1 7, the 
encryption logic module 22 encrypts the challenge 
using the encryption key stored within memory 23 (not 
readable) and transfers the encrypted challenge and a 

25 serial number, which is also stored within memory 23, to 
the radio frequerxjy transmitter 16. The encrypted chal- 
lenge and serial number, together with the repeated 
command, are transmitted in parallel to communication 
processor 1 1 by both radio frequency transmitter 16 and 

30 low frequency transmitter/receiver 17 as a complete 
response to the challenge to authenticate the first com- 
mand transmission. Controller 14 executes the com- 
mand, or authorizes other devices to execute the 
command, if the correct vehicle code or signature is 

35 received in response to the challenge. With bidirectional 
communication using the low frequency transmit- 
ter/receivers 13 and 17, the challenge-response feature 
provides greatly increased security over the rolling code 
system. It is now also possible to transmit additional 

40 data or programming information between the remote 
transponder 15 and the communication processor 11 
using the low frequency transmitter/receiver 1 7. 

As discussed above, it is further contemplated that 
the radio frequency receiver 12 in communication proc- 

45 essor 11 and radio frequency transmitter 16 in trans- 
ponder 15 may be transmitter/receivers, each capable 
of performing both the receiving and transmitting func- 
tions. When radio frequency transmitter/receivers are 
used, t>oth the radio frequency communication and the 

so low frequency communication between communication 
processor 1 1 and transponder 15 will be two way trans- 
missions used to transmit data between the two 
devices- 

For remote keyless entry, a function or transmission 
55 range of at least approximately one meter (1 m) is nec- 
essary. However, this range is difficult to reach with pas- 
sive transponders, even when the transponder has an 
antenna the size or a aedit card. Therefore, an active 
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function may be provided by the inclusion of a battery as 
shown in FIG. 3, a block schematic of a low frequency 
transmitter/receiver 50, another embodiment of the low 
frequency transmitter/receiver 17 for remote trans- 
ponder 15. 5 

Low frequency transmitter/receiver 50 includes 
logic control module 51, receiver control module 52. 
transmitter control module 53, the end of burst detector 
54, the adaptive pluck logic module 55, signal level con- 
verter 56, clock regenerator 57. divider 58, threshold io 
detector 59, resonant circuit 60. charge capacitor 61 
and diodes 62, 63 and 64 connected as shown in FIG. 
3. Resonate circuit 60 has a capacitor connected in par- 
allel with an indbctor with the value of each conponent 
selected to provide a resonant circuit that is resonant at is 
a radio frequency of 134.2 kilo hertz (134.2 kHz). The 
size of charge capacitor 61 is selected so that the fully 
charged capacitor will have sufficierrt charge to provide 
the power necessary to enable the low frequency trans- 
mitter/receiver 50 to function properly. A capacitor suff i- 20 
ciently large would be, for example, a capacitor of 
approximately 0.12 microfarads {0.12nf)- Diodes 62, 63 
and 64 are symbols for the necessary one way function, 
that is. the signal is conducted in only one direction. 
Diodes 62, 63 and 54 are preferably Schottky diodes 25 
with low feed through voltage, if possible in the selected 
semiconductor process, although they may be normal 
semiconductor diodes such as 1N4148 diodes or field 
effect transistor (FET) circuits using switched gates. 

The vehicle operator initiates a command by provid- 30 
ing a nrranual stimulus at the door handle of the vehicle 
or with remote transponder 15 - the operator operates 
the door handle or pushes one of the plurality of 
switches or push buttons 18 to indicate the action 
desired at the vehicle. After receipt of a radio frequency 35 
signal from transponder 15, the communication proces- 
sor 11 or interrogator transmits a low frequency sigrral 
(134.2 kHz) to low frequency transmitter/receiver 50 
which, when received by resonant circuit 60, provides 
electrical energy to charge capacitor 61 in addition to 4o 
asking transponder 15 for confirmation of the command 
or action request. The low frequency voltage is rectified 
by diode 62 and charges capacitor 61 . The voltage level 
reached on charge capacitor 61 depends upon the dis- 
tance between the comqrjunication processor 11 and 45 
tfie transponder 1 5 antennas which are typically reso- 
nance circuits having a high quality factor such as, for 
example, resonant circuit 60. If sufficient energy is accu- 
mulated so that the voltage on charge capacitor 61 
exceeds a certain limit such as one volt, for example, so 
the threshold detector 59 switches the battery supply 
voltage from battery 65, provided at terminal VBAT. to 
connect the battery voltage through connections VCC to 
the logic circuitry of low frequency transmitter/receiver 
50- The threshold detector 59 prevents discharge of bat- 55 
tery 65 when transponder 15 is in the presence of elec- 
tromagnetic interference such as, for example, if the 
transponder is placed upon a television set. If the volt- 
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age lin^t on charge capacitor 61 is low. the influence of 
the interference will increase, but the sensitivity (the sig- 
nal detection range) will also increase. As explaned 
hereinafter, the threshold detector 59 may be an active 
or a passive device. Inaeasing the sensitivity requires 
wore stand-by current from battery 65. with a resulting 
decrease in battery life. The threshold detector may 
also be located at the radio frequency signal input 
where higher signal annplitudes are normally available. 
If battery 65 is rK>t available, voltage is still provided to 
the logic circuitry by charge capacitor 61 through diodes 
63 and 64. The resonant circuit 60 is separated from the 
integrated circuit power supply during the reception of 
data, the write phase, from the communication proces- 
sor 11. The signal received by transponder 15 and the 
level of oscillation of the resonant circuit 60 is usually 
tow when the distance between the communication 
processor 1 1 and the transponder 15 is great. The use 
of battery 65 to provide voltage to the drcuit enalDles the 
tow frequency transmitter/receiver 50 circuit to receive 
and react to trar^mitted signals having lower ampli- 
tudes than would be possible in the passive mode of 
operation, that is. without battery power. Voltage is mon- 
itored by the end of burst detector 54. When the anpli- 
tude of the voltage signal drops and the resonant circuit 
60 resonates with its own frequency instead of being 
enhanced by the signal from communication processor 
1 1 , the end of burst detector 54 activates clock regener- 
ator 57 and the pluck logic module 55 which preferalsfy 
provides peak pluck and slope control. The pluck logic 
module 55 enhances oscillation whenever a voltage 
amplitude drop caused by the resonant circuit loss fac- 
tor is detected. Pluck logic, the pluck logic module 55 
and the peak detector used in pluck logic are descrilDed 
in US. Patent 5.283.529. U.S. Patent 5.227,740 and 
U.S. Patent 5,126,745 

The provision of battery power enables the circuit to 
operate properly with the reception of a lower signal 
amplitude than would be possible in the passive mode. 
Voltage amplitude drops during and after the write 
phase are detected by the end of burst detector 54 over 
greater distances because internal current sources and 
digital circuits of low frequency transmitter/receiver 50 
are already fully functional as battery 65 provides the 
necessary power rather than relying upon the signal 
received by charge capacitor 61 to provide power, as 
would be required in the passive mode of operation. 
The low frequency transmitter/receiver 50 is atjle to 
regenerate even small signal amplitudes which helps 
pluck circuit 55 enhance the oscillation during the free 
running times, during the reception of write signals and 
during the transmission of response data. Thus, the dis- 
tance over which data may be received by transponder 
15 using pulse width modulation is significantly 
enhanced when compared to the distance possible 
when a transponder operating in the passive nrKxle is 
used. 

After a period for the charging of charge capacitor 
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61, communication processor 11 transmits a challenge 
such as. for example, a random number to transponder 
15. This challenge is received by low frequency trans- 
mitter/receiver 50 and is encrypted, using the encryp- 
tion key stored in its memory, to become the signature 5 
of the transponder 15. This generated signature, the 
encrypted random number, and the serial number of 
transponder 15 are transmitted to the communication 
processor 11 by the low frequency transmitter/receiver 
50 and. at the same time, transferred to radio frequency 10 
transmitter 16 of transponder 15 using the internal serial 
input/output interface circuitry. When the internal serial 
input/output interface circuitry is used without low fre- 
quency transmitter/receiver 13 being involved so that no 
voltage is charged in capacitor 61». the activate signal on 15 
terminal ACT of low frequency transmitter/receiver 50 
switches the battery 65 voltage, provided at terminal 
VBAT, to connect through connections VCC to the level 
converter 56 which maintains the correct input and out- 
put signal voltage levels under all voltage supply levels. 20 

When the end of burst, the end of the transmission 
from communication processor 1 1 , measured by end of 
burst detector 54 lasts for a certain time such as, for 
exarrple. a period of 1,9 milliseconds (1.9 ms). a "time- 
out" or response signal is generated in accordance with 25 
the disclosure above for transmission to comnrtunication 
processor 11. Divider 58 counts the radio frequency 
oscillations regenerated by clock regenerator 57 during 
the end of burst period to determine when the response 
or "timeout" signal is to be generated and switches the 30 
battery voltage, terminal VBAT, to the resonant circuit 60 
to increase the transmission frequency anrplitude ar^d, 
therefore, to increase the transmission reading distance 
and the signal robustness against noise or other inter- 
ference. Thus, similar to the enhanced reception dis- 35 
tance. the distance over which data may be transmitted 
by transponder 1 5 of this invention using frequency shift 
keying (FSK) is enhanced when compared to the dis- 
tance possible when a transponder operating in the 
passive mode is used. The radio frequency transmitter 40 
16 transmits the signature and serial number with a 
command that the communication processor 1 1 accept 
the parallel low frequency response as a backup and as 
a security check. This dual signal, the parallel transmis- 
sion of a radio frequency signal anc* a low frequency sig- 45 
nal, enh&nces the security against noise and 
manipulation of the command signals. 

Operation may also be enhanced by using trarrsmit- 
ter/receivers as the radio frequency receiver 12 in com- 
munication processor 11 and radio frequency so 
transmitter 16 in transponder 15. When radio frequency 
transmitter/receivers are used, both the radio frequency 
communication and the low frequency communication 
between communication processor 1 1 and transponder 
1 5 will be two way transmissions, further enhancing the 55 
security against noise and manipulation of the com- 
mand signals. 

The road vehicle keyless entry system 10 may also 
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be used to replace the ignition key of the vehicle. When 
the vehicle operator has entered the vehicle and wishes 
to start the engine, the operator will initiate a new com- 
mand process with a manual stimulus of a push button 
on or near the vehicle dash board, for exanple. This 
stimulus initiates a new challenge/response phase via 
the low frequency transmitter/receivers. Operation of 
the keyless entry system 10 atter receipt of the low fre- 
quency signal is as described above. 

Turning now to FIG. 4, a block schematic illustrates 
modifications to tiie remote transponder 15 of the road 
vehicle keyless entry system 10 of FIG. 1 . Communica- 
tion processor 1 1 is located within the vehicle and mini- 
aturized transponder 15 is a remote unit which may 
carried by the vehicle operator. The apparatus and 
operation of communication processor 11 and trans- 
ponder 15 are as described in regard to FIG. 1 above 
except that the serial input/output interface circuitry 
between radio frequency transmitter 16 and low fre- 
quency trarrsmitter/receiver 17 is replaced by 
driver/demodulator circuit 19 and coupling coil 20 to 
provide for the contactless transfer of data between the 
two circuits. In tNs embodiment, battery voltage is pro- 
vided to radio frequency ti^nsmitter 16 and voltage is 
transferred to low frequency h-ansmitter/receiver 17 by 
signal transmission through coupling coil 20. Com- 
mands are initiated by the manual stimulation of one of 
the plurality of pu^ buttons 18 on radio frequency 
transmitter 1 6 which transmits the command to commu- 
nication processor 1 1 and at the same time transfers 
the command data to low frequency transmitter/receiver 
17. As described above, it is contenrtplated that radio 
frequency receiver 12 and radio frequency transmitter 
16 may be transmitter/receivers allowing too way radio 
frequency communication in addition to the two way low 
frequency communication. It is. thus, possible to initiate 
commands by manual stimulation of push buttons, sim- 
ilar to push buttons 18. located on corrmunication proc- 
essor 1 1 . Communication processor 1 1 would transmit 
the command to radio frequency transmitter 16. which 
would then be a transmitter/receiver, and it would 
request data from low frequency transmitter/receiver 1 7 
to respond to the command from communication proc- 
essor 1 1 . Solid arxi dotted lines are shown in FIG. 4 to 
illustrate the two way flow of information by the use of 
radio frequency transmitter/receivers. The commarKte 
and data are transferred to low frequency transmit- 
ter/receiver 17 via coupling coil 20 which is driven by 
driver/demodulator circuit 19. The response, also via 
coupling coil 20. from low frequency transmitter/receiver 
1 7. the signature, serial number and status, are dennod- 
ulated by driver/demodulator drcuit 19 for reading by 
radio frequency transmitter 16. Operation of communi- 
cation processor 11 and transponder 15 are otherwise 
as described in regard to FIG. 1 above. This embodi- 
ment of the invention may be especially useful if it is 
desired to separate the command function provided by 
radio frequency transmitter 16, which initiates all com- 
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mands by operation of one of the push buttons 18. from 
the communication function provided by lew frequency 
transmitter/receiver 17, which provides two way com- 
municaton for the transfer and verification of data 
between transponder 1 5 and communication processor 5 
11. RacSo Irequency transmitter 16 and low frequency 
transmitter/receiver 17 may» thus, be in separate com- 
pact cases, allowing separate use of a passive trans- 
ponder tor operation over short distances, separate use 
of an active, battery powered radio frequency trans- w 
ponder for remote control functions over greater dis- 
tances and combined use of the passive and active 
transponder functions over the full desired operating 
range, thus alioiJving adaption of the transponder size to 
the size the vehicle operator is willing to carry. is 

FIG. 5 is a block schematic illustrating modifications 
to the remote transponder of the road vehicle keyless 
entry system of FIG. 4. In FIG. 5 the driver/demodulator 
circuit 19 interface of FIG. 4 is replaced or compli- 
mented by a write distance expander interface circuit 20 
1 9a which cooperates with radio frequency transmitter 
16 and low frequency transmitter/receiver 17 to provide 
a transponder 1 5 that is operable at an increased dis- 
tance between transponder 15 and communication 
processor 1 1 with low frequency transmitter/receiver 17 25 
operating in the passive mode, that is without a voltage 
directly supplied by a battery. 

Road vehicle keyless entry system 10 has commu- 
nication processor 11 and transponder 15. The func- 
tional elements and operation of communication 30 
processor 1 1 are described above. Transponder 1 5 has 
a low frequency transmitter/receiver 1 7 that operates on 
a low frequency such as. for exanrrple, 134.2 kilohertz 
(134.2 kHz) to provide two way communication, a chal- 
lenge and encrypted response, with communication 35 
processor 11. Transponder 15 also has a radio fre- 
quency transmitter 16 that operates on a radio fre- 
quency such as, for example, 433 megahertz (433 
MHz). Radio frequency transmitter 16 is equipped with 
a battery and the range in which transponder 15 can 40 
receive the low frequency signal is increased by bite dis- 
tance expander interface circuit 19a. The radio fre- 
quency transmitter 16 and low frequency 
transmitter/receiver 17 must be in a common housing 
for operation over extend^ distances, but may be sep- 45 
abated from one another while providing basic opera- 
tions at shorter operating ranges. 

The radio frequency transmitter 1 6 is typically used 
to provide security functions such as, for example, light 
switching, alarm arming and disarming and similar f unc- so 
tions. The low frequency transmitter/receiver 1 7 is typi- 
cally used in the passive operating mode to provide 
keyless entry and Immobilization functions at short 
range, for example at distances less than one meter (1 
m). When a request or command is made by the manual ss 
operation of one of a plurality of push buttons 18 on 
transponder 15 or by a mechanical switch such as the 
vehicle door handle, a challenge or interrogation, a ran- 
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dom number. Is transmitted from communication proc- 
essor 1 1 using a fen^ite or air coil antenna and pulse 
pause modulation at a frequency of, for example, 134.2 
kilohertz (134.2 kHz) to the low frequency transmit- 
ter/receiver 17 of transponder 15. Low frequency trans- 
mitter/receiver 1 7 encrypts the challenge using a secret 
encryption key held in its memory (not readatjie) to pro- 
duce a signature and responds by transmitting the 
encrypted challenge, its signature, and the transponder 
serial number to the communication processor 1 1 using 
a frequency shift keying (FSK). frequency modulation, 
signal at a frequency of, for example, 134.2 kilohertz 
(134.2 kHz). If the distance between communication 
processor 1 1 and transponder 1 5 is too far, this commu- 
nication will fail. To achieve a greater functional range, 
the write distance expander 19a interface circuit is pro- 
vided. 

One embodiment of the write distance expander 
19a Is shown in FIG. 6 in a block schematic illustrating 
the expander's functional elements and data paths. A 
block schematic is used In FIG. 7 to illustrate the func- 
tional elements and data paths of a second embodiment 
of the write distance expander 19a. 

Write distance expander 19a interface drcuit 
includes resonant circuit 80 which consists of coil 81 . 
which also serves as a coupling coil, and a capacitor 
tuned to a frequency of 134.2 kilohertz (134.2 kHz); 
radio frequency voltage limiter 82 with a battery charge 
circuit: diode 83 connected to charge capacitor 84; 
threshold detector 85; clock regenerator 86, an opera- 
tional amplifier used as a comparator; envelope rectifier 
87; end of burst detector 88; and a 134.2 kilohertz 
(134.2 kHz) clock generator module 89 which may. for 
example, be a pluck logic module or a separate oscilla- 
tor with a divider gated by activation signal TXCT 

Coil 81. which is, for example, a small ferrite or air 
coil, is located proximate the antenna of low frequency 
transmitter/receiver 17 at a position in which the coil 81 
can receive the radio frequency signals from communi- 
cation processor 1 1 and the resonant circuit of low fre- 
quency transmitter/receiver 17. The write distance 
expander 19a resonant circuit 80 has a high quality fac- 
tor to achieve a radio frequency voKage amplitude of at 
least about 1 to 2 volts at the desired maximum reading 
distance between the transponder 1 5 and communica- 
tion processor 1 1 . When communication processor 1 1 
transmits a challenge to transponder 15 and the dis- 
tance between the two devices is too great, the low fre- 
quency transmitter/receiver 1 7 will not function properly 
t»ecause the challenge is not received or the signal is 
too weak. If the challenge is not properly received by 
low frequency transmitter/receiver 17, encryption of the 
challenge is not started and no response will be trans- 
mitted to the communication processor 1 1 . The write 
distance expander 19a circuit has a threshold detector 
85 which detects the radio frequency voltage increase 
during the charge phase, the period in which the radio 
frequency signal from communication processor 1 1 is 
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used to charge charge capacitor 84. The threshold 
detector 85 activates the supply voltage for the active 
devices and turns on the controller within the radio fre- 
quency transmitter 16. The threshold detector 85 may 
be an N-channel FET with low gate source-voltage, a 5 
circuit that does not consume power as long as the FET 
is not in the conductive state. The threshold detector 85 
can also be an active device which consumes a certain 
amount of standby current from the battery. The pulses 
of the FET or of the active device, can be used to trigger w 
a retriggerable monof bp or can be used directly to turn 
on the controller within radio frequency transmitter 16 
which activates the pov^er supply to the write distance 
expander 19a. The oscillation of the write distance 
expander is rectified by diode 83 and filtered by charge 75 
capacitor 84 to provide a reference voltage for the com- 
parators, clock regenerator 86 and end of burst detector 
88. 

During transmission of the command and the chal- 
lenge to the low frequency transmitter/receiver 17, the 20 
radio frequency signal is pulsed and the length of the 
pulse pauses are the indication for a low or a high bit 
The envelope rectifier 87 detects the pulse pauses by 
rectifying the output of the clock regenerator 86. The 
envelope rectifier 87 output signal is compared to the 2S 
voltage reference level by the end of burst detector 88 
and this signal is conducted to the controller of radio fre- 
quency transmitter 16. The controller monitors the out- 
put from end of burst detector 88, detects the length of 
the pulse pauses and determines whether a low bit or a 30 
high bit is received. ThreshokJ detector 85, envelope 
rectifier 87 and comparator 88 may be combined in the 
simplest case using a field effect transistor (FET) with 
low gate/source voltage as shown in FIG. 8, an illustra- 
tion of a simple write distance expander. When an 35 
encryption command is received, the challenge is 
received and stored in controller memory. The controller 
of radio frequency transmitter 16 switches the voltage 
provided by battery 90 to the clock regenerator 86 when 
the response from the low frequency transmit- 40 
ter/receiver 17 is expected and clock regenerator 86 
amplifies and limits the radio frequency signal oscilla- 
tion and generates a digital clock signal. This clock sig- 
nal is conducted directly to the controller of radio 
frequency transmitter 16 or to th^controller through a 45 
digital or Analog demodulator circuit 91 if the controller 
is not capable of demodulating the signal. The controller 
checks the frequency shift keying (FSK) modulated 
response from the low frequency transmitter/receiver 17 
to determine whether it is valid and complete. The so 
encrypted response to the challenge from the communi- 
cation processor 1 1 is transmitted by the low frequency 
transmitter/receiver 17 and the response, the signature, 
status and other desired information, may be sent in 
parallel by the radio frequency transmitter 1 6 to confirm 55 
and authenticate the response. \Nher\ only the chal- 
lenge, but no response from the low frequency transmit- 
ter/receiver 17, is detected by the controller of radio 



frequency transmitter 16, the controller transfers the 
challenge stored In memory to the low frequency trans- 
mitter/receiver 17 using the 134.2 klohertz (134.2 kHz) 
dock generator 89 which may t:>e a pluck logic circuit or 
a gated oscillator with divider as shown In the demodu- 
lator circuit 91. When low frequency transmitter/receiver 
1 7 receives the challenge, it will generate an encrypted 
signature from the challenge and will transmit the 
encrypted signature at a frequency of 134.2 kilohertz 
(134.2 kHz) as the response to communication proces- 
sor 11. This response will also be transferred to radio 
frequency transmitter 16 and will be transmitted at a 
radio frequency of 433 megahertz (433 MHz) to com- 
munication processor 1 1 in parallel with the low fre- 
quency transmission of the response. The radio 
frequency voltage limiter circuit 82 necessary to protect 
the components can be used to charge k>attery 90. If the 
threshold detector 85, and the controller of radio fre- 
quency transmitter 16, detects a continuous radio fre- 
quency signal for a long period of time, then radio 
frequency voltage limiter 82 will switch the voltage to a 
higher level for use to charge battery 90. Depending 
upon the low frequency voltage initiated in the write dis- 
tance expander 19a resonant circuit 81 (antenna size) 
and the threshold detector level sensitivity, distances of 
from about 1 meter (1 m) to about 2 meters (2 m) 
between transponder 15 and communication processor 
1 1 can be bridged for remote keyless entry communica- 
tions. This greater or expanded signal reception dis- 
tance comt>ined with the greater transmission distance 
for radio frequency remote control transmitter 16, 
greater than 10 meters (>10 m) allows the operator to 
gain access to the vehicle or authorize other vehicle 
actions from a greater distance or without rerroving the 
transponder 15 from the pocket. 

In addition to the described function, write distance 
expander 19a may also be used as a low cost radio fre- 
quency module with receive and transmit capabilities. 
Such modules could be used in transponders useful 
over short distances. 

In view of the foregoing desaiption, it will be seen 
that several advantages are attained by the present 
invention. 

Although the foregoing Includes a description of the 
best mode contemplated for carrying out the invention, 
various modifications could be made in the construc- 
tions herein described and Illustrated without departing 
from the scope of the invention. It is intended that all 
material contained in the foregoing description or shown 
in the accompanying drawing should be interpreted as 
illustrative rather than limiting. 

Claims 

1 . A keyless entry system connprising; 

a communication processor and a remote, min- 
iaturized transponder; the communcation proc- 



8 




15 EP0 848 

essor having a radio frequency receiver, a low 
frequency transmitter/receiver and a controller 
capable of reading signals sent and received 
by the low frequency transmitter/receiver; and 
the transponder having a radio frequency 5 
transmitter arranged for transmitting a signal to 
the communication processor upon receipt of a 
manual stimulus and a low frequency transmit- 
ter/receiver capable of reading signals received 
from the communication processor and trans- 10 
mitting an encrypted response to the communi- 
cation processor. 

2. The keyless entry system of Claim 1, wherein the 
radio frequency transmitter of the transponder and 15 
the radio frequency received of the communication 
processor send and receive a signal having a fre- 
quency of approximately 433 megahertz. 

3. The keyless entry system of Claim 1 or Claim 2, 20 
wherein the low frequency transmitter/receivers of 

the transponder and the communication processor 
send and receive a signal having a frequency of 
134.2 kilohertz. 

25 

4. The keyless entry system of Claim 3 wherein the 
low frequency transmitter/receiver of the trare- 
ponder is operable in a passive mode. 

5. The keyless entry system of any preceding claim. 30 
wherein the system is arranged to be operable in a 
motor vehicle, and wherein the communication 
processor is disposed in said motor vehicle. 
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9. The keyless entry system of Claim 8. wherein the 
transponder radio frequency transmitter and low 
frequency transmitter/receiver are in separate 
cases. 

10. The keyless entry system of any preceding daim, 
wherein the communication processor radio fre- 
quency receiver and the transponder radio fre- 
quency transmitter are radio frequency 
transmitter/receivers capable of two way transmis- 
sion between the communication processor and the 
transponder. 

11. A keyless entry system comprising; 

a communication processor and a remote 
transponder; the communication processor 
having a radio frequency receiver, a low fre- 
quency transmitter/receiver and a controller 
capable of reading the signals sent and 
received by the low frequency transmit- 
ter/receiver; and 

the transponder having a radio frequency 
transmitter for transmitting a signal to the com- 
munication processor upon receipt of a manual 
stimulus, a low frequency transmitter/receiver 
capable of reading signals received from the 
communication processor and transmitting an 
encrypted response to the communication 
processor, and an interface circuit and coupling 
coil to provide contactless transfer of data 
between the radio frequency transmitter and 
the low frequency transmitter/receiver. 



6. The keyless entry system of any preceding claim, 35 
wherein the transponder supplements or replaces a 
door lock mechanism and keys, signals from the 
transponder being received by the communication 
processor that, after reception and verification of 
access codes, authorizes actuation of the locking 40 
mechanism. 

7. The keyless entry system of any of Claims 1 to 5, 
wherein the transponder supplements or replaces a 
vehicle door lock mecl43nism and ignition keys, sig- 45 

4 nals from the transponder being received by the 
communication processor that, after actuation of 
the locking mechanism and performance of vehicle 
related initialization functions, such as seat, seat 
belt and vehicle mirror adjustments. so 

8. The keyless entry system of any preceding claim, 
wherein the transponder further includes an inter- 
face circuit and a coupling coil to provide contact- 
less transfer of data between the radio frequency 55 
transmitter and the low frequency transmit- 
ter/receiver. 



12. The keyless entry system of Claim 1 1 , wherein the 
radio frequency transmitter of the transponder and 
the radio frequency receiver of the communication 
processor are arranged to send and receive a sig- 
nal having a frequency of 433 megahertz, 

13. The keyless entry system of Claim 11 or Claim 12, 
wherein the low frequency transmitter/receivers of 
the transponder and the communication processor 
are arranged to send and receive a signal having a 
frequency of 134.2 kilohertz. 

14. The keyless entry system of any of Claims 11 to 13. 
wherein the manual stimulus is the manual actua- 
tions of one of a plurality of push buttons. 

15. The keyless entry system of any of Claims 11 to 14, 
wherein the comrrrunication processor, radio fre- 
quency receiver and the transponder radio fre- 
quency transmitter are radio frequency 
transmitter/receivers capable of two way transmis- 
sions between the communication processor and 
the transponder. 
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16. A keyless entry system comprising an in-vehide 
communication processor and a renrrcte trans- 
ponder, the communication processor and trans- 
ponder communicating in parallel paths, a first path 
being a radio frequency transmission from the $ 
transponder to the communication processor and a 
second path being a low frequency, encrypted two 
way transmission between the transponder and the 
communication processor. 

10 

17. The keyless entry system of Claim 16. wherein the 
radio frequency transmission and the low frequency 
transmission are compared for authentication of the 
transmitted data. 

15 

18. The keyless entry system of Claim 16, wherein the 
radio frequency transmission is a two way transmis- 
sion between the transponder and the communica- 
tion processor. 

20 
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a low frequency transmitter/ receiver (13) and a control- 
ler (14) capable of encrypting and reading the signals 
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